ata-validator 0.18.1 → 0.18.2

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to ata-validator are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/), and this project adheres to semantic versioning.
 
+## 0.18.2 - 2026-05-26
+
+### Fixed
+
+- The browser and edge build no longer touches the filesystem at import. The safe-regex engine source was embedded into standalone output through a `fs.readFileSync` that ran at module load, which crashed bundlers that stub `fs`/`path` for the browser (a regression from 0.17.3). The read is deferred to the first standalone compile that actually embeds the engine, so importing ata, validating, generating types, and compiling pattern-free schemas now run with no filesystem access in browsers and Cloudflare Workers. Added a regression test that bundles the browser entry and runs it with `fs`/`path` stubbed.
+
 ## 0.18.1 - 2026-05-26
 
 ### Added

package/index.js

@@ -305,19 +305,26 @@ const _CP_LEN_SOURCE = `function _cpLen(s) {
 // directive and CommonJS exports stripped, plus the `__ataSafeRe` alias the
 // emitted code calls. The engine has no eval/new Function, so the embed is
 // CSP-safe.
-const SAFE_REGEX_EMBED = (() => {
-  const raw = require("fs").readFileSync(require("path").join(__dirname, "lib", "safe-regex.js"), "utf8");
-  const body = raw
-    .replace(/^'use strict'\s*\n/, "")
-    .replace(/\nmodule\.exports[^\n]*\n?/, "\n");
-  return body.trimEnd() + "\nconst __ataSafeRe = compileSafe;";
-})();
+// Lazy so merely importing ata never touches the filesystem. Bundlers that stub
+// `fs`/`path` for the browser would otherwise crash at module load; the read is
+// deferred to the first standalone compile that actually embeds the engine.
+let _safeRegexEmbed = null;
+function getSafeRegexEmbed() {
+  if (_safeRegexEmbed === null) {
+    const raw = require("fs").readFileSync(require("path").join(__dirname, "lib", "safe-regex.js"), "utf8");
+    const body = raw
+      .replace(/^'use strict'\s*\n/, "")
+      .replace(/\nmodule\.exports[^\n]*\n?/, "\n");
+    _safeRegexEmbed = body.trimEnd() + "\nconst __ataSafeRe = compileSafe;";
+  }
+  return _safeRegexEmbed;
+}
 
 // Returns the engine embed when any supplied compiled function references the
 // safe matcher (jsFn._usesSafeRe), else an empty string so non-pattern modules
 // pay zero bytes.
 function safeRePrelude(...fns) {
-  return fns.some((f) => f && f._usesSafeRe) ? SAFE_REGEX_EMBED + "\n" : "";
+  return fns.some((f) => f && f._usesSafeRe) ? getSafeRegexEmbed() + "\n" : "";
 }
 
 // Above this size, simdjson On Demand (selective field access) beats JSON.parse
@@ -1561,7 +1568,7 @@ Validator.bundleStandalone = function (schemas, opts) {
     return `(function(R){${preamble}var E=function(d){var _all=true;${errBody}};return function(d){${jsFn._hybridSource}}})(R)`;
   });
   const arr = `[${fns.join(",")}]`;
-  const safeEmbed = bundleUsesSafeRe ? SAFE_REGEX_EMBED + "\n" : "";
+  const safeEmbed = bundleUsesSafeRe ? getSafeRegexEmbed() + "\n" : "";
   if (format === 'esm') {
     return `// Auto-generated by ata-validator — do not edit\n${safeEmbed}const R=${R};\nconst validators=${arr};\nexport default validators;\nexport { validators };\n`;
   }
@@ -1632,7 +1639,7 @@ Validator.bundleCompact = function (schemas, opts) {
   let out = isEsm
     ? "// Auto-generated by ata-validator — do not edit\n"
     : "'use strict';\n";
-  if (bundleUsesSafeRe) out += SAFE_REGEX_EMBED + "\n";
+  if (bundleUsesSafeRe) out += getSafeRegexEmbed() + "\n";
   const declKW = isEsm ? "const" : "var";
   out += `${declKW} R=Object.freeze({valid:true,errors:Object.freeze([])});\n`;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ata-validator",
-  "version": "0.18.1",
+  "version": "0.18.2",
   "description": "JSON Schema validation with first-class TypeScript and zero runtime cost. AOT compile to per-schema ESM modules with zero validator dependency. Generic Validator<T> for TypeBox/Zod/Valibot composition. Optional runtime API. Standard Schema V1 compatible.",
   "main": "index.js",
   "module": "index.mjs",
@@ -42,7 +42,7 @@
     "rebuild": "cmake-js rebuild --target ata",
     "prebuild": "pkg-prebuilds-copy --baseDir build/Release --source ata.node --name=ata --strip --napi_version=10",
     "prebuild-all": "npm run prebuild -- --arch x64 && npm run prebuild -- --arch arm64",
-    "test": "node test.js && node tests/test_no_native.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_rich_errors_optout.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
+    "test": "node test.js && node tests/test_no_native.js && node tests/test_browser_nofs.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_rich_errors_optout.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
     "bench:size": "node benchmark/bench_aot_size.mjs",
     "test:suite": "node tests/run_suite.js",
     "test:compat": "node tests/test_compat.js",
@@ -130,6 +130,7 @@
     "@sinclair/typebox": "^0.34.49",
     "@types/node": "^25.8.0",
     "cmake-js": "^8.0.0",
+    "esbuild": "^0.28.0",
     "jsonc-parser": "^3.3.1",
     "mitata": "^1.0.34",
     "typebox": "^1.1.7",